Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
File: liqjLr7JzqHJPEvVX4XvfgpdT5I.mft (raw, json)
Hash identifier: +2yG9BYAnmJiIiYS4HW5SbnuCouOkh0Di/tUrwlc2hM=
Subject key identifier: 54:66:06:A5:55:67:EC:5A:ED:C6:35:A2:B4:EF:C8:B1:3E:96:C1:BC
Authority key identifier: 96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
Certificate issuer: /CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Certificate serial: 01A06E703B58EFF0E3E6252004616C2C5192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
Manifest number: 0DFB
Signing time: Fri 04 Sep 2026 22:00:43 +0000
Manifest this update: Fri 04 Sep 2026 22:00:43 +0000
Manifest next update: Sat 05 Sep 2026 22:00:43 +0000
Files and hashes: 1: 1-3zUelmkTSgTStRjVWxjNNQBiM4.roa (hash: HmKxIUYZnOTiOcoe1j/2oHqq1Af7hqG1JDavmuwUScA=)
2: 2W_yiasSlHxMzGvCseIvYg5Ozd4.roa (hash: KtoflOTIZ2ZK45JBs/qFK0YOESeh/OnZjIbaMrPqgdU=)
3: liqjLr7JzqHJPEvVX4XvfgpdT5I.crl (hash: NSPGB+xaRJFW8WMWAYkZtY1/rkT3u2XHG1luOX6EM2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:3b:58:ef:f0:e3:e6:25:20:04:61:6c:2c:51:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962aa32ebec9cea1c93c4bd55f85ef7e0a5d4f92
Validity
Not Before: Sep 4 22:00:43 2026 GMT
Not After : Sep 5 22:00:43 2026 GMT
Subject: CN=546606a55567ec5aedc635a2b4efc8b13e96c1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:21:43:a5:58:ed:3e:fb:2a:ad:d3:b5:13:
f4:80:9b:e1:b6:d8:9c:af:c6:c6:d7:ac:b1:56:11:
bc:8c:7b:bf:eb:f4:89:05:5c:b7:60:9c:45:97:51:
5d:d3:a6:03:b6:3c:f2:98:ba:91:d2:78:cd:72:73:
0c:c7:0d:ce:c3:8f:51:bf:b2:3b:31:da:12:45:6d:
c7:83:55:47:0d:20:f0:7a:af:e0:da:e0:ec:bd:df:
69:35:76:23:30:f4:64:61:69:0e:da:32:51:e0:54:
54:8c:5d:38:e2:48:33:f2:ba:0d:d1:d4:31:6a:4b:
65:0a:a3:d1:29:f0:86:c5:4a:20:78:91:71:1a:4c:
83:84:27:15:8c:02:42:20:22:66:13:6e:20:25:ea:
7c:8a:d0:0c:6e:38:cd:3f:89:00:56:9b:93:b0:bb:
0d:6e:4f:15:9c:bc:14:51:0f:ec:a2:1a:ea:07:69:
cc:5c:9f:4e:5a:ed:eb:67:44:f4:14:cf:97:dd:39:
eb:05:cb:8e:78:3d:ca:d0:3d:14:69:6e:c7:f1:03:
75:ce:c3:35:39:9f:8b:3a:f5:f9:75:8f:f1:65:07:
f5:fd:c1:ae:0a:d4:37:8b:ab:ee:18:2d:85:7c:47:
d5:b8:9e:61:51:8d:84:93:61:b8:4c:ae:03:42:23:
83:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:66:06:A5:55:67:EC:5A:ED:C6:35:A2:B4:EF:C8:B1:3E:96:C1:BC
X509v3 Authority Key Identifier:
keyid:96:2A:A3:2E:BE:C9:CE:A1:C9:3C:4B:D5:5F:85:EF:7E:0A:5D:4F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/liqjLr7JzqHJPEvVX4XvfgpdT5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2e38ea-c9fa-4013-9fd3-858c6f8829eb/1/liqjLr7JzqHJPEvVX4XvfgpdT5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d9:a7:e3:a9:06:a1:0a:73:c1:76:06:28:93:7e:6c:72:e3:
f2:ab:23:e6:93:24:2e:05:05:7e:94:7f:fe:a5:5f:3a:e7:35:
97:83:b8:ef:2f:a6:65:f5:0d:96:18:33:f0:16:a6:c3:e8:ec:
5b:d5:08:35:cc:34:18:69:83:4c:cb:48:94:71:12:85:04:8e:
9d:6f:81:8f:ab:08:06:74:bc:ec:e9:bd:ac:93:3f:ef:cd:90:
e6:be:22:55:97:1a:7d:9e:77:ae:9e:34:80:04:77:90:ea:29:
2f:a4:de:67:a0:4d:96:e9:13:8f:6d:a9:8f:9a:aa:ff:b0:c3:
bb:a2:57:35:37:2a:93:de:ac:7b:10:83:54:a0:4f:9e:b6:73:
5d:74:72:c8:c6:88:73:95:bf:a1:2c:03:9b:d4:1c:db:0e:1a:
4f:77:83:fb:5b:59:47:9c:ac:80:71:6b:9c:43:a6:d1:a0:6d:
ba:bd:b4:9a:18:3d:55:3a:f5:61:7d:f0:de:d4:c7:70:3b:13:
43:e1:77:e6:2f:6e:ba:f0:8f:2a:76:6a:8a:6f:ef:1e:73:81:
b2:50:1c:3a:e0:1d:33:49:ab:33:3e:74:43:0b:b0:36:db:36:
4f:73:84:5a:66:0b:db:12:d8:17:ea:8a:48:d0:16:fc:54:df:
ba:f1:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:53 2026 by rpki-client